On what basis CHAIN integer values are generated in IPtables under iptables file?

haariseshu · 11-05-2009, 03:11 AM

Hello Friends,

I have posted this question just to know the operations of "/etc/init.d/iptables save" command.

On executing this command all the rules will be saved permenantly to "/etc/sysconfig/iptables".

Quote:

Sample "iptables" file:
# Generated by iptables-save v1.2.11 on Thu Nov 5 13:05:09 2009
*filter
:INPUT DROP [1:328]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:328]
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p udp -m udp --dport 80 -j ACCEPT
COMMIT
# Completed on Thu Nov 5 13:05:09 2009

In this I cant understand the 3,4,5 lines... On which basis this integer ratio's are getting generated??
Asking this just on the interest to know addtional information only. If anyone can explain this that will be great really!

Thank you...

centosboy · 11-05-2009, 04:00 AM

Quote:

Originally Posted by haariseshu

Hello Friends,

I have posted this question just to know the operations of "/etc/init.d/iptables save" command.

On executing this command all the rules will be saved permenantly to "/etc/sysconfig/iptables".

In this I cant understand the 3,4,5 lines... On which basis this integer ratio's are getting generated??
Asking this just on the interest to know addtional information only. If anyone can explain this that will be great really!

Thank you...

what???

These are byte and packet counters relating to each table.

haariseshu · 11-05-2009, 04:12 AM

hi frnd,
thank U for your response.

In this line ":INPUT DROP [1:328]", what exactly the integers 1 and 328 means??
byte

acket counters?? Can you please provide some more details on this values (like some sample calculations)??

haariseshu · 11-05-2009, 04:25 AM

Hi,

I found this link:
http://www.linuxtopia.org/Linux_Fire...les/x1824.html

and is really useful for me to understand...

Thank you so much for the key words you included with your post

...